Project

General

Profile

Wiki » Domain Controller » Microsoft Active Directory »

LDAP

Lightweight Directory Access Protocol or LDAP is used to authenticate users to Active Directory in applications that supports LDAP.

LDAP Service Account

The following user service account is used to bind LDAP applications to the LDAP service from the domain controller.

User: ldap_bind_user
DN: "CN=LDAP Bind User,OU=Service Accounts,DC=refol,DC=us"

Testing LDAP Using python-ldap library

Use the following code to test LDAP connection. Install python-ldap before proceeding.

sudo apt-get install build-essential python3-dev \
    libldap2-dev libsasl2-dev slapd ldap-utils tox \
    lcov valgrind
python -m pip install python-ldap

import ldap
import logging

# Enable logging for debugging
logging.basicConfig(level=logging.DEBUG)

# LDAP server details
ldap_server = "ldap://192.168.2.251"
bind_dn = "CN=LDAP Bind User,OU=Service Accounts,DC=refol,DC=us"
password = "mysecurepassword"
search_base = "CN=Users,DC=refol,DC=us"
search_filter = "(sAMAccountName=frank)"  # Replace with your search filter

try:
    # Initialize LDAP connection
    ldap_connection = ldap.initialize(ldap_server)
    ldap_connection.set_option(ldap.OPT_REFERRALS, 0)  # Important for AD

    # Bind/Authenticate with the server
    ldap_connection.simple_bind_s(bind_dn, password)
    print("LDAP bind successful")

    # Perform an LDAP search
    result = ldap_connection.search_s(search_base, ldap.SCOPE_SUBTREE, search_filter)
    print("LDAP search result:", result)

except ldap.INVALID_CREDENTIALS:
    print("Invalid credentials")
except ldap.LDAPError as e:
    print("LDAP error:", e)
finally:
    # Unbind the connection
    ldap_connection.unbind_s()

References